SOC analyst

Advanced Incident Analysis: Utilize advanced tools and techniques to analyze and investigate security incidents detected within the organizations networks and systems.

• Incident Response: Lead incident response efforts, coordinating with internal and external stakeholders to mitigate and remediate security incidents promptly.
• Team Leadership: Provide mentorship and guidance to the L1 SOC team, assisting in the development of their skills in incident analysis, parser creation, rule views, and report management.
• Parser Creation: Develop and maintain parsers to enhance the capability of the SOCs security information and event management (SIEM) system in detecting and correlating security events.
• Rule View Management: Manage and optimize rule views within the SIEM platform to ensure accurate and timely detection of security threats.
• Report Management: Oversee the generation and distribution of security reports, including incident reports, trend analysis, and recommendations for improvement.
• Collaboration: Work closely with other teams within the organization, including IT operations, network engineering, and application development, to improve overall security posture and incident response capabilities.